7364 matches found
On the Security Implications of PQC in TLS: Handshake Exhaustion and IDS Degradation
Post-Quantum Cryptography PQC is increasingly being integrated into TLS 1.3 to enhance resilience against quantum-enabled attacks. However, the additional computational and communication overhead introduced by PQC primitives during the handshake phase may also amplify the impact of TLS handshake...
When Binaries Talk Back: Representation-Confusion Attacks on LLM-Assisted Reverse Engineering
LLM-assisted reverse-engineering RE systems analyze strings, decompiler output, and tool reports derived from ttacker-controlled binaries. A binary can make data look like instructions or records from one origin look like independent evidence. We call such failures Representation-Confusion Attack...
Designing a GDPR-Compliant Security Architecture for Remote Elderly Care Systems: A Privacy-By-Design Approach
IoMT-based remote elderly care systems generate continuous streams of sensitive health data, yet existing security architectures have not simultaneously addressed three interdependent challenges: GDPR-compliant edge-layer pseudonymisation, elderly-specific zero-interaction usability as a binding...
Why Not Fix It Once and for All? an Empirical Study of Multiple Patches for Vulnerability Fixes in Open-Source Software
Security patches for open-source software constitute a foundational resource for vulnerability remediation research and practice. However, analyzing and applying multiple patches remains challenging, especially when trying to determine at what point in a patch sequence a vulnerability is fully...
Xalgorix Autonomous AI Pentesting Agent 4.5.59
Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported - so you get proof, not a pile of maybes to triage. Self-hosted, private, and bring-your-own-LLM. Built in Go + TypeScript...
Joern 4.0.580
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
Breaking Refusal in the First Half: A Mechanistic Study of the Prefill Jailbreak
Aligned language models refuse harmful requests, but a one-line prefill "Sure, here is" strips the refusal. We ask where and how it fails. The harm representation stays intact: on the prompts the attack flips to compliance, a linear probe reads harm as high as on the refused ones 0.91-0.98, while...
Trust but Verify? Uncovering the Security Debt of Autonomous Coding Agents
The increasing adoption of autonomous coding agents accelerates software development but also introduces scoped security risks within high-impact file paths that can outpace traditional human review capacity. While prior research has primarily evaluated these systems in terms of functional...
Noise Resilience of Quantum Key Distribution Protocols Secured against Independent Attacks with One-Way Communication
We investigate the resilience to noise of single-qubit quantum key distribution QKD protocols in the scenario of security against independent eavesdropping attacks and key distillation based on one-way classical communication. To this end, we introduce a noise-based metric that quantifies the...
IronCurtain 0.13.0
IronCurtain is an early-stage research project exploring how to make AI agents safe enough to be genuinely useful. It is a runtime for autonomous AI agents, where security policy is derived from a human-readable constitution. APIs, configuration formats, and architecture may change...
SingGuard-NSFA: Extensible Guardrails for Agentic AI Via Generative Reasoning and Real-Time Classification
We present nsfaguard, a guardrail framework for securing agentic AI systems against operational threats, such as prompt injection, sensitive information extraction, malicious code requests, dangerous tool misuse, and resource exhaustion. We first introduce the NSFA taxonomy, which organizes 185...
GDM AI Control Roadmap
AI agents are rapidly accelerating work at frontier AI companies, helping with AI R&D, cyber-defence, and advancing scientific discoveries. As these agents become more tightly integrated into our systems, unlocking their full potential requires rethinking how we do security. We should not assume...
Nebula AI-Powered Penetration Testing 2.0.0
Nebula is an advanced, AI-powered penetration testing open-source tool that revolutionizes penetration testing by integrating state-of-the-art AI models into your command-line interface. Designed for cybersecurity professionals, ethical hackers, and developers, Nebula automates vulnerability...
Antiproof: Synthesizing Vulnerability Detectors and Proofs of Exploitability
Discovering vulnerabilities before attackers exploit them requires high recall and reliable automatic validation, but existing approaches struggle to achieve both without prohibitive cost. We present Antiproof, an end-to-end vulnerability discovery system that combines neuro-symbolic detector...
Anticipating Decoder Side-Channel Attacks in Fault-Tolerant Quantum Computers
As quantum computing emerges as an applied technology, there is a growing need to protect quantum computers against information security attacks. This work identifies a new class of side-channel attacks against fault-tolerant quantum computers, in which the syndrome data that is sent to the decod...
When Cheap Gradients Fail: The Measurement Cost of Attacking Quantum Classifiers
Adversarial perturbations threaten machine learning classifiers, including variational quantum classifiers. We show that finite quantum measurement statistics shot noise act as a built-in defense against gradient-based test-time attacks whose cost scales unfavorably for the attacker. Because ever...
Understanding the Impact of AI Code Assistants on Security API Usage: An Empirical Study
AI code assistants are transforming software development, but their implications for software security remain a major concern, particularly in the context of security APIs. These APIs are critical for safeguarding software systems, yet their complexity often leads to incorrect use and serious...
Rethinking MCP Security: A Large-Scale Study of Runtime MCP Servers and Security Scanner Reliability
The Model Context Protocol MCP has rapidly established itself as a standard interface for enabling LLM-based agents to interact with external tools and services. As MCP servers are increasingly entrusted with security-sensitive operations, understanding their real-world risks has become critical...
AMT-X: Phase-Structured Multi-Turn Red-Teaming with Checklist-Gated Evaluation
Safety evaluation of large language models LLMs relies largely on single-turn attack datasets and single-judge scoring, underestimating risk from adaptive multi-turn adversaries and reporting a single success rate that does not separate partially actionable outputs from those carrying complete...
TestSSL 3.2.4
testssl.sh is a free command line tool which checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as recent cryptographic flaws, and much more. It is written in pure bash, makes only use of standard Unix utilities, openssl and last but not least bash sockets...
Explaining Intrusion Alert Decisions of Deep Learning-Based Network Intrusion Detection Systems for Security Analysts
In this paper, we present EXP-SEC, a novel framework which can explain the intrusion detection decisions of DL-based NIDS which lead to security alerts in a way that is aligned with the domain knowledge of analysts working in Security Operations Center SOC. We highlight the following features of...
MTD-Playground: An Attacker-Aware Evaluation Framework for Network Moving Target Defense
Moving Target Defense MTD has emerged as a proactive network cyber defense paradigm that increases attacker uncertainty through dynamic network reconfiguration techniques such as Software-Defined Networking SDN-enabled path randomization. However, existing evaluations remain fragmented due to...
LifeOS 7.1.1
LifeOS is a Life Operating System. It knows your goals, the people who matter to you, and where you are right now, and it works to move you toward where you want to be. The engine underneath is a verifiable loop: turn any request into testable criteria, then climb until they pass. This is the fir...
GNSS Spoofing Detection in TDD Networks: A 3GPP Standards-Based Security Framework
Time Division Duplex TDD mobile networks require synchronization accuracy of $\pm$1.5 $μ$s 3GPP TS 38.104, with GNSS-disciplined grandmaster clocks as the predominant timing source. GNSS spoofing -- now a documented operational threat -- can corrupt timing across all downstream base stations, yet...
Baselines Before Architecture: Evaluating Coding Agents for Autonomous Penetration Testing
Recent autonomous penetration testing papers report high benchmark scores while adding multi-component security harnesses around frontier LLMs. Because these systems often change both architecture and backbone model, it is difficult to tell how much performance comes from the harness rather than...
Prezta: Provable Remote Execution of Zero-Trust Authorization Using SNARKs
Modernizing the security of operational technology systems that control critical infrastructure has become a pressing challenge. Because edge devices have limited capabilities, modernization has relied on application gateways that interface with identity management systems and enforce access...
Securing LLMs in the Wild: Privacy and Security Challenges at the Edge
Large Language Models LLMs are rapidly moving from research settings into the wild, deployed on enterprise infrastructure, personal devices, and edge platforms. While cloud deployments offer scalable compute, concerns over data sovereignty, compliance, latency, and third-party dependence are...
MindReader: Using LLMs to Encourage Memorable and Secure Password Replacement
We report on the design and evaluation of MindReader, a tool that helps a user replace her password when she is required to do so. Left to their own devices, users tend to replace their previous passwords with predictable variations of the original ones. MindReader leverages LLMs to suggest...
Agent Hacks Agent: Autoresearch for Production-Agent Red-Teaming
Production LLM agents such as Claude Code and Codex operate over untrusted content, files, commands, and workspace state, making safety failures directly actionable. Red-teaming must therefore keep pace with evolving models and tools. Existing approaches mainly optimize attack success and preserv...
Mako: A Self-Evolving Agentic Operating System (SE-AOS) for Autonomous Web Exploitation
We introduce the Self-Evolving Agentic Operating System SE-AOS: a new class of AI agent that treats exploit capability as a mutable, versioned kernel it extends at runtime, observing its own failures, synthesising new capabilities, proving them against a live target, and hot-loading them back int...
HarmQ: Harmonic Backdoor Attacks against Quantum Neural Networks
Quantum Neural Networks QNNs have emerged as a promising paradigm for quantum machine learning in the Noisy Intermediate-Scale Quantum NISQ era, leveraging quantum phenomena such as superposition and entanglement to process information in exponentially large Hilbert spaces. However, QNNs inherit...
ARMOR-IMC: Adaptive Resource Mapping for Operational Robustness Via Secure In-Memory Computing
The massive data-movement overhead in traditional architectures has led to the adoption of In-Memory Computing IMC for energy-efficient Deep Neural Network DNN processing. By leveraging emerging devices like Spin-Orbit Torque Magnetic Tunnel Junctions SOT-MTJs, IMC bypasses the "memory wall" and...
Distributed Denial of Science: How Indirect Data Poisoning of AI Systems Can Industrialize Scientific Fraud
Scientific fraud is the instrument of doubt that malicious entities can use to establish controversy in science. Historically, it required the resources of a company: deep pockets, ghostwritten articles, and corrupt academics. Today, Artificial Intelligence AI is increasingly automating scientifi...
Quantum-Enhanced Physical-Layer Threat Detection in Metropolitan-Scale Fiber Networks
Network security is widely recognized as a key application of quantum technology. However, its large-scale deployment is hindered by the need for tight coordination between fundamentally different quantum and classical processing steps in conventional protocols. This requirement introduces strong...
SoK: Federated Learning for Intrusion Detection in Vehicular Networks
Modern vehicular networks face an expanding attack surface across internal Electronic Control Units ECUs and external Vehicle-to-Everything V2X communication. Federated Learning FL has emerged as a decentralized paradigm to deploy Intrusion Detection Systems IDS without compromising data privacy...
Mechanised Operational Semantics of Rowhammer
Rowhammer is a hardware vulnerability in dynamic random-access memory DRAM in which repeated accesses to aggressor rows can induce bit-flips in victim rows. This phenomenon violates a core assumption of conventional programming language semantics: reading or writing one memory location does not...
Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability
Large language models LLMs have transformed misinformation from a primarily content-centric problem into a broader ecosystem-level security challenge. When misused, LLMs create risks beyond false content generation, enabling attacks on the social contexts, evidence sources, retrieval corpora, and...
Firewall3D: A Hardware Firewall for Defending 3D Printers against Firmware Attacks
As the 3D printing market continues to grow rapidly, with an estimated value exceeding $30 billion, cybersecurity risks and attacks targeting additive manufacturing systems are also increasing. These attacks aim to sabotage printed components, steal intellectual property, or even physically damag...
Threat Vectors and the State of the Art in Defense Methods for Security in Neurotechnology
Brain-computer interfaces BCIs are a class of diverse hardware modalities, associated software, and connected devices which are widely used in a variety of fields, including neurosurgery, biomedical data analysis, and neuroimaging. Recent years have seen rapid advancements in BCI technology, and...
Which Neurons Detect Malicious Code? A Probing Study of LLM Security Knowledge
Background. Large language models LLMs have become increasingly capable of understanding and generating source code, leading to their widespread adoption in software engineering tasks such as code completion, repair, and vulnerability detection. However, despite their strong empirical performance...
TSAI-MetaFraud: A Benchmark Dataset for Financial Fraud Transaction and Behavioral Risk Detection in Metaverse Ecosystems
The emergence of metaverse platforms has created virtual economies that introduce new challenges related to fraud, bot activity, and illicit financial behavior. Despite growing interest in trustworthy metaverse analytics, existing datasets typically focus on user behavior, authentication, or...
Flounder 0.3.1
Flounder turns modern coding agents into an end-to-end security audit system. Give it an authorized target boundary - a repository, source tree, package, deployed clue, or prior run - and the agent can prepare the workspace, read the code and supporting material, map the attack surface, dig into...
Impact of Benign Connectivity Variations on Intrusion Detection for Encrypted OPC UA Traffic in Industrial Private 5G Networks
Machine learning ML-based intrusion detection systems IDSs are increasingly used to monitor encrypted industrial communication. However, their behavior under realistic private 5G operating conditions remains insufficiently understood. This paper investigates the impact of benign connectivity...
Using LLMs to Adjudicate Static-Analysis Alerts with Error Reduction Techniques
Static analysis is widely used for finding security weaknesses in source code before deployment, but it often produces far more alerts than analysts can review. We study how well large language models LLMs can adjudicate classify as a real bug or a false alarm static-analysis alerts. We use two...
Statistically Undetectable Backdoors in Deep Neural Networks
We show how an adversarial model trainer can plant backdoors in a large class of deep, feedforward neural networks. These backdoors are statistically undetectable in the white-box setting, meaning that the backdoored and honestly trained models are close in total variation distance, even given th...
Federated Learning Architecture: Data Privacy and System Security Approaches
This study explores the integration of homomorphic encryption and differential privacy techniques to enhance data privacy and security in Federated Learning FL systems. FL allows data to remain on local devices, eliminating the need for centralized data collection; however, sensitive information...
Xalgorix Autonomous AI Pentesting Agent 4.5.55
Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported - so you get proof, not a pile of maybes to triage. Self-hosted, private, and bring-your-own-LLM. Built in Go + TypeScript...
Federated Cybersecurity Testbed As a Service (FCTaaS): A Framework to Federate Cybersecurity Testbeds
Rapid technological change is reshaping society through emerging domains such as autonomous vehicles and smart manufacturing, creating new research challenges in system design, operation, security, and training. Researchers often rely on testbeds to reproduce experimental scenarios, collect and...
Evaluating AI Models' Capability to Automate Voice Phishing Attacks
Voice phishing vishing attacks have traditionally been limited by the need for human operators. The rapid emergence of high-quality AI voice synthesis and large language models LLMs reduces this bottleneck and enables scalable, automated scams. In this paper, we conduct a large-scale survey...